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an access network portion (10') adapted to communi- 
cate with a core network portion (20) of a public mobile 
telecommunications network and with mobile terminals 
(1 ). The access network Includes at least one base sta- 
tion (104) adapted to communicate with the mobile ter- 
minals via an unlicensed radio link and an access con- 
trol part connected to th e core network portion . The base 
station is connected to the access control part via a fixed 
broadband network. The invention concerns a connect- 
ing a base station with an access control part of an ac- 
cess network over a fixed broadband network, and a 
method of registering a base station with an access con- 
trol part over the fixed broadband network. 
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Description 

Field of invention 

[0001 J The invention concerns mobile communication 
networks, with specific relevance to mobile telephone 
networks and the transition between fixed and mobile 
telephony services. 

Background art 

[0002] Mobile communication is becoming increas- 
ingly widespread as the number of available services 
multiply. However the higher billing costs associated 
with most mobile networks and also the often inferior 
reception of mobile signals inside some buildings mean 
that subscribers generally prefer to retain a fixed tele- 
phone access in the home or a place of business. The 
types of services and also the way in which these serv- 
ices are presented differ depending on whether the sub- 
scriber is using a mobile phone or a fixed phone. This 
can range from the provision of completely different 
services, such as SMS, to the manner in which an ad- 
dress book is used. Moreover, subscribers to mobile and 
fixed phone networks will generally have different sub* 
scriptions and thus different phone numbers. Indeed in 
many countries, a reliable fixed access to telecommu- 
nication services is provided by only a single operator. 
A subscriber to both a mobile and fixed telephone net- 
work will therefore be obliged to adapt the manner in 
which he uses the fixed and mobile sets. 
[0003] A presently available service uses a single 
handset that combines a GSM terminal with a cordless 
handset for accessing a fixed network. The handset can 
access the fixed network, for example via a PBX in a 
corporate facility, using a digital enhanced cordless tel- 
ecommunications (DECT) system. When the handset 
passes out of range of the PBX base station the handset 
communicates with the GSM network. The user has 
both a fixed and a mobile subscription and also has sep- 
arate numbers associated with these subscriptions. 
This allows the user to retain the use of a single phone, 
however, the services available will depend on whether 
the phone is being used as a GSM terminal or cordless 
handset. The phone is also large compared to conven- 
tional mobile terminals since it essentially consists of a 
GSM terminal arranged back to back with a DECT hand- 
set. 

[0004] It is thus an object of the present invention to 
provide an improved communication network that alle- 
viates the problems of prior art arrangements. 
[0005] It is a further object of the present invention to 
provide a communication network and network ele- 
ments that enable a uniformity of service whether a sub- 
scriber uses a fixed or mobile access to telecommuni- 
cation services. 



SUMMARY OF INVENTION 

[0006] These and further objects are attained in a mo- 
bile telecommunications network having an access net- 
5 work portion and a core network portion. The access 
network portion includes an access control part that is 
arranged to communicate with the core network portion 
over a predetermined licensed mobile network inter- 
face, such as an A interface for GSM or lu interface for 
10 UMTS. The access network portion also includes one 
or more base station parts that are arranged to commu- 
nicate with mobile terminals over an unlicensed radio 
Interface and also a fixed broadband network connect- 
ing the access control part and the base station parts. 
*s The invention resides in a method of connecting a base 
station with an access control part of an access network 
over a fixed broadband network, and a method of reg- 
istering a base station with an access control part. 
[0007] By providing access to the public mobile net- 
work service through an unlicensed radio interface, that 
by definition will be low power and have a small range 
compared to conventional access networks such as the 
base station subsystems BSS in GSM or UTRAN in 
UMTS, and by relaying upper layer messages in a trans- 
parent manner, i.e. without mapping or similar interwork- 
ing, the same service and subscription can be retained 
by the subscriber without perceiving a difference in the 
level and presentation of service obtainable. Moreover, 
the voice quality in the home or office environment is 
greatly improved by the local coverage. The battery life- 
time of his mobile terminals will also be greater than 
when it is used uniquely with conventional access net- 
works. In addition, a public mobile network operator 
would be able to offer a fixed access service without the 
need for additional ceil planning. 
[0008] Advantageously, the connection between the 
base station part and the access controller part exploits 
an already existing broadband fixed network available 
to the subscriber at his home or workplace. This network 
may be a cable TV network, or ADSL network, but is 
preferably IP based so that the interface between the 
access network elements is independent of the physical 
network type. In an alternative embodiment the fixed 
network may be an ATM-based network. In particular, 
DSL type networks could run over ATM directly. Other 
technologies could be run on an ATM-based network on 
top of IP. 

[0009] The invention may also concern the following 
aspects: 

(1) A mobile telecommunications network including 
an access network portion and a core network por- 
tion, wherein said access network portion includes 
an access control part arranged to communicate 
with said core network portion over a predetermined 
licensed mobile network interface, wherein said ac- 
cess network portion further includes at least one 
base station part arranged to communicate with 
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mobile terminals over an unlicensed radio interface 
and a fixed broadband network connecting said ac- 
cess control part and said at least one base station 
part, wherein said access network portion is ar- 
ranged to relay upper iayer messages between a 5 
mobile terminal and said core network portion in a 
transparent manner over said unlicensed radio in- 
terface. Preferably the upper layer messages in- 
clude mobility management messages and above. 
Preferably still the unlicensed radio interface uses w 
broadband radio. Advantageously the unlicensed 
radio interface is a Bluetooth interface. 

(2) An access network adapted to communicate 
with mobile terminals over an unlicensed radio in- 
terface and with a core network portion over a pre- 15 
determined mobile network interface, wherein at 
least upper layer messages exchanged between 
said mobile terminal and said core network are re- 
layed substantially transparently over said unli- 
censed radio interface and through said access net- 20 
work. Preferably the unlicensed radio interface us- 
es broadband radio. Preferably still the unlicensed 
radio interface is a Bluetooth interface. 

(3) A base station for use as part of an access net- 
work arranged to communicate with a core network 25 
portion of a public mobile telecommunications net- 
work, wherein the base station Is adapted to com- 
municate over an unlicensed radio interface with at 
least one mobile terminal and to communicate 
through a fixed broadband network with an access 30 
control part of said access network connected to 
said core network, wherein said base station is ar- 
ranged to relay messages transmitted between said 
mobile terminal and said core network transparently 
over said unlicensed radio interface and through 35 
said fixed network. Preferably the base station in- 
cludes a first interface module for relaying upper 
layer messages over said unlicensed radio link and 

a second interface module for relaying said upper 
layer messages over said fixed network, said first *o 
and second interface modules being arranged to 
transfer upper layer messages between one anoth- 
er substantially transparently. Preferably still said 
second interface module is arranged to relay upper 
layer messages over an IP-based fixed network. 45 

(4) An access network controller for use as part of 
an access network arranged to enable communica- 
tion of a mobile terminal with a public mobile tele- 
communications network through an unlicensed ra- 
dio interface, wherein the access network controller so 
is arranged to communicate with a core network 
portion of said public mobile telecommunications 
network over a predetermined licensed mobile net- 
work Interface and is further connected to a fixed 
broadband network for communication with mobile ss 
terminals through at least one base station, wherein 
said access network controller is arranged to trans- 
mit and receive upper layer messages exchanged 



with mobile terminals in a transparent manner over 
said fixed broadband network. Preferably the ac- 
cess network controller includes an interface mod- 
ule for relaying upper iayer messages over said 
fixed network. Preferably still said fixed broadband 
network is an IP-based network, wherein said inter- 
face module is arranged to relay upper layer mes- 
sages through an IP protocol tunnel. Advanta- 
geously said fixed broadband network is an ATM- 
based network. Preferably the access network con- 
troller includes a register for mapping the location 
of mobile terminals to a base station, wherein said 
register is arranged to be accessible on receipt of a 
paging request from said core network to a mobile 
terminal to determine a base station able to com- 
municate with said mobile terminal. 

(5) A mobile telecommunications network including 
an access network portion and a core network por- 
tion, wherein the access portion includes a plurality 
of base station systems for communicating with mo- 
bile terminals over a licensed public mobile network 
air interface, the base station systems being ar- 
ranged to communicate with said core network por- 
tion over a predetermined mobile network interface, 
wherein said network includes at least one local 
base station system arranged to communicate with 
said core network portion over said predetermined 
mobile network interface and further adapted to 
communicate with mobile terminals over an unli- 
censed radio interface, wherein said local base sta- 
tion system is arranged to relay upper layer mes- 
sages between said mobile terminals and said core 
network substantially transparently. Preferably said 
local base station system includes at least one local 
base station for communicating with mobile termi- 
nals over said unlicensed radio interface and a local 
base station controller connected to said at least 
one local base station and adapted to communicate 
with said core network portion over said predeter- 
mined network interface. Preferably still the local 
base station is connected to the local base station 
controller through a fixed broadband network. Ad- 
vantageously the fixed network is an IP-based net- 
work, and upper layer messages exchanged be- 
tween said mobile terminals and said core network 
portion are relayed between said local base station 
and said local base station controller by tunnelling 
through said IP-based network. Preferably the fixed 
network is an ATM -based network. Preferably the 
unlicensed radio interface uses broadband radio. 
Preferably still the unlicensed radio interface is a 
Bluetooth interface. 

(6) A mobile terminal for communicating with a mo- 
bile telecommunications network including an ac- 
cess network portion and a core network portion, 
said terminal including a communication manage- 
ment module for generating upper layer messages 
for, and receiving upper layer messages frorrii said 
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core network, a first interface module for establish- 
ing a licensed public mobile network radio link with 
said access network portion and relaying said upper 
layer messages to and from said communication 
management module, wherein the terminal further 
includes a second interface module for establishing 
an unlicensed radio link with a modified access net- 
work connected to said core network, wherein said 
second interface module is arranged to relay said 
upper layer messages over said unlicensed radio 
link when said mobile terminal is connected to said 
modified access network. Preferably he second in- 
terface module is arranged to relay said upper layer 
messages between said communication manage- 
ment module and said core network portion over 
said unlicensed radio link in a transparent manner. 
Preferably still the unlicensed radio interface uses 
broadband radio. Advantageously the unlicensed 
radio interface is a Bluetooth interface. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0010] Further objects and advantages of the present 
invention will become apparent from the following de- 
scription of the preferred embodiments that are given by 
way of example with reference to the accompanying 
drawings. In the figures: 

Fig. 1 schematically depicts parts of a modified 
GSM network, 

Fig. 2 depicts the signalling sequence for automatic 
configuration of a fixed access network por- 
tion in accordance with the present invention, 

Fig. 3 schematically depicts an overview of the or- 
ganisation within a mobile terminal, 

Fig. 4 schematically depicts the functional organi- 
sation of the mobile terminal, 

Fig. 5 schematically depicts the functional organi- 
sation of a home base station and home base 
station controller, 

Fig. 6 schematically depicts the organisation of 
ceils, 

Fig. 7 schematically illustrates a subscriber location 
register of the home base station controller, 

Fig. B depicts the signalling sequence for handover, 

Fig. 9 shows the protocol stacks of the modified ac- 
cess network in the control plane, 

Fig. 10 shows the protocol stacks of the modified ac- 
cess network in the user plane. 



DETAILED DESCRIPTION OF THE DRAWINGS 

[0011] The network illustrated schematically in Fig. 1 
includes standard elements of the GSM architecture 
s and also includes elements of a General Packet Radio 
Service (GPRS) network. A mobile phone or terminal 
MT t is illustrated in Fig. 1 . This communicates with the 
GSM network. The network comprises a access net- 
work portion (AN) 10 and a core network portion (CN) 

10 20. The divisions between these portions are denoted 
by dotted lines in Fig. 1. As the names suggest, the ac- 
cess network portion 10 provides the mobile terminal 1 
with access to the core network 20, and through this to 
other network services. 

is [0012] In the exemplary network illustrated in Fig. 1 
the core network portion 20 includes a home location 
register (HLR) 201 and mobile services switching cen- 
tres (MSC) 202. The network also supports the General 
Packet Radio Service, and to this end includes serving 

20 GPRS support nodes (SGSN) 203. The function and 
structure of these elements are well known and will not 
be described in detail here. Moreover, it will be under- 
stood that other elements will be present in a GSM core 
network although they are not illustrated in Fig. 1 . The 

25 core network portion 20 may provide access to other, 
external networks 30, such as ISDN and PSTN net- 
works and packet and circuit switched packet data net- 
works such as intranets, extranets and the Internet 
through one or more gateway mobile service switching 

30 centres GMSCs 204 and gateway GPRS support nodes 
GGSNs 205. 

[0013] The access network portion 10 includes the 
typical GSM elements, specifically base station subsys- 
tems BSS 1 01 , one of which is illustrated schematically 

3s jn Fig. 1 . The base station subsystems 1 01 are connect- 
ed through the defined fixed standard A and Gb inter- 
faces with MSCs 202 and SGSNs 203, respectively in 
the core network portion 20. Each base station substys- 
tem 101 includes a base station controller BSC 102 

^0 which communicates with one or more base transceiver 
stations BTS 103 via the defined A^ air interface. The 
base transceiver stations 103 communicate with mobile 
terminal MT 1 over the GSM standard U m radio air in- 
terface, it will be understood that while the BTS 1 03 and 

*s BSC 102 are depicted as forming a single entity in the 
BSS 101 , the BSC is often separate from the BTSs and 
may even be located at the mobile services switching 
centre MSC 202. The physical division depicted in Fig. 
1 serves to distinguish between the parts of the network 

so making up the access network portion 1 0 and those that 
form the core network portion 20. 
[0014] In addition to the standard GSM access net- 
work portion provided by the BSSs 1 01 , the network ac- 
cording to the invention Includes a modified access net- 

55 work portion as shown in the lower half of Fig. 1 and 
denoted by the numeral 10\ Hereinafter this will be de- 
scribed as a fixed access network portion 1 0'. The com- 
ponents making up this fixed access network portion 1 0' 
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? also enable the mobile terminal 1 to access the GSM 
core network portion, and through this, other communi- 
cation networks via an unlicensed radio interface X, rep- 
resented in Fig. 1 by the bi-directional arrow 11 . By un- 
licensed radio is meant any radio protocol that does not 5 
require the operator running the mobile network to have 
obtained a license from the appropriate regulatory body. 
In general, such unlicensed radio technologies must be 
low power and thus of limited range compared to li- 
censed mobile radio services. This means that the bat- io 
tery lifetime of mobile terminals will be greater. Moreo- 
ver, because the range is low the unlicensed radio may 
be a broadband radio, thus providing improved voice 
quality. The radio interface may utilise any suitable un- 
licensed radio protocol, for example a wireless LAN pro- *s 
tocol or Digital Enhanced Cordless Telecommunications 
(DECT). Preferably, however, Bluetooth. radio is utilised, 
which has a high bandwidth and lower power consump- 
tion than conventional public mobile network radio. 
[0015] The Bluetooth standard specifies a two-way 20 
digital radio link for short-range connections between 
different devices. Devices are equipped with a trans- 
ceiver that transmits and receives in a frequency band 
around 2.45GHz. This band is available globally with 
some variation of bandwidth depending on the country. 25 
In addition to data, up to three voice channels are avail- 
able. Each device has a unique 48-bit address from the 
IEEE 802 standard. Built-in encryption and verification 
is also available. 

[0016] The element of the fixed access network por- 30 
tion 10' adapted to communicate across the Bluetooth 
interface is designated a local or home base station 
(HBS) 1 04. This element handles the radio link protocols 
with the mobile terminal MT 1 and contains radio trans- 
ceivers that define a cell in a similar manner to the op- 3s 
eration of a conventional GSM base station transceiver 
BTS 103. The home base station HBS 104 is controlled 
by a home base station controller HBSC 105, which 
communicates with a mobile service switching centre 
MSC 202 over the GSM standard A interface and also 40 
with a serving GPRS support node SGSN 203 over a 
standard Gb interface, if available in the core network 
portion. The interface between the home base station 
HBS 104 and its home base station controller HBSC 105 
is designated a Y-interf ace. The home base station con- *s 
trailer HBSC 105 provides the connection between the 
MSC 202 or SGSN 203 and mobile terminal 1 . The joint 
function of the home base station HBS 104 and the 
home base station controller HBSC 1 05 emulate the op- 
eration of the BSS 1 01 towards the SGSN 203 and MSC 50 
202. In other words, when viewed from the elements of 
the core network 20 such as the mobile service switch- 
ing centre (MSC) 202 and the serving GPRS support 
node (SGSN) 203, the fixed access network portion 10* 
constituted by the home base stations HBS 1 04 and the ss 
home base station controller HBSC 1 05 looks like a con- 
ventional access network portion 10. 
[001 7] The applications that run on the mobile termi- 



nal MT 1 on top of the public mobile network radio inter- 
faces also run on top of Bluetooth radio between the mo- 
bile terminal 1 and the home base station HBS 104. 
[0018] The interface between the home base station 
HBS 104 and the home base station controller HBSC 

105 which is designated Y in Fig. 1 is preferably provid- 
ed by a fixed link. The home base station 104 is intended 
to be a small device that a subscriber can purchase and 
install in a desired location such as the home or an office 
environment to obtain a fixed access to the mobile net- 
work. In orderto reduce the installation costs on the part 
of the operator, the interface between the home base 
station 104 and the home base station controller 105, 
which is designated Interface Y in Fig. 1 therefore pref- 
erably exploits an already existing connection provided 
by a fixed network 106. Preferably this network is a 
broadband packet network. Suitable networks might in- 
clude those based on ADSL, Ethernet, LMDS, or the 
like. Home connections to such networks are increas- 
ingly available to subscribers. Although not shown in 
Fig. 1 , the home base station HBS 1 04 wiilbe connected 
to a network terminal giving access to the fixed network 
106, while the home base station controller HBSC 105 
may be connected to an edge router ER of the network 

106 that also links the fixed network 106 to other net- 
works such as intranets and the internet. IP is used for 
communication between the home base station HBS 
104 and home base station controller HBSC 105 over 
the fixed network 106 to render the transport of data in- 
dependent of the network type. The link between the 
home base station HBS 104 and the home base station 
controller HBSC 105 is preferably always open, so that 
this connection is always available without the need for 
reserving a channel. Communication across this fixed 
network 106 is performed by tunnelling, in other words 
the upper protocol layers are transported across the ac- 
cess network 1 06 in a transparent way, without mapping 
or interworking, as will be described in more detail be- 
low. In parallel with the home base station HBS 104, the 
user may have other devices connected to the fixed net- 
work, such as a PC. While the fixed network 1 06 is pref- 
erably an IP-based network, the invention is not limited 
to this type of network. Specifically ATM-based net- 
works could also be used. In particular when DSL tech- 
nologies are used in this network, they could be used 
directly on top of the ATM layer, since they are based 
on ATM. Naturally, an ATM based network could also be 
used to transport IP, serving as a base layer. 

[0019] The home base station HBS 104 is a device 
that can be purchased by a subscriber and installed by 
the subscriber in the desired location by plugging it in to 
a port of an ADSL or CATV modem to access the fixed 
network 106. The port is in contact with an intranet that 
is either bridged or routed on the IP level. Thus standard 
protocols, such as IP, DHCP, DNS and the like are used. 
The home base station HBS 104 connected to the mo- 
dem utilises these standard protocols and functions to 
ascertain to which home base station controller HBSC 
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105 it should connect, and also to establish a connection 
with this home base station controller HBSC 105. 
[0020] Each home base station controller HBSC 1 05 
controls several home base stations HBS 104 and to 
this end holds a data structure representing a logical s 
view of these home base stations HBS 105. Configura- 
tion procedures alter this data structure as home base 
stations HBS 104 are added or removed. This will be 
described in further detail below. When a home base 
station HBS 104 is added, the home base station con- 10 
troller HBSC 105 establishes a TCP or SCTP connec- 
tion with the home base station HBS 104. Before this 
connection has been established the home base station 
HBS 104 is unable to transfer messages to the home 
base station controller HBSC 105 even in response to 15 
a broadcast paging message. A home base station HBS 
104 is allocated an IP address on the fixed network 106. 
This IP address may either be configured manually prior 
to installation or be obtained using a DHCP request. The 
home base station controller HBSC 1 05 will naturally al- 20 
so have an IP address on the fixed network 106. This 
address will also be known by the home base station 
HBS 1 04 either by manual configuration or obtained by 
a DNS query to the fixed network 1 06, in which case the 
HBS 104 is configured with the symbolic name of the 2s 
home base station controller HBSC. 
[0021] The signalling sequence for this configuration 
procedure is illustrated in Fig. 2. Specifically, Fig. 2 il- 
lustrates the signalling between a home base station 
HBS 104, an attach-query-port of a home base station 30 
controller HBSC 1 05 and an ADM port of the home base 
station controller HBSC 105. The procedure starts at 
power-up or reset, when the home base station HBS 
104 attempts to attach to an attach-query-port in the 
home base station controller HBSC 105. This is 35 
achieved first by the home base station HBS 1 04 send- 
ing a TCP synchronisation signal at event 1 , which is 
repeated and acknowledged by the port at event 2. The 
home base station HBS then sends an 
A7TACHMENT_QUERY message in event 3. This mes- 40 
sage contains the Bluetooth device address of the HBS. 
If the HBS has previously been connected to the HBSC 
1 05, this message will also contain a location area iden- 
tifier LAI of the HBS 1 04 and an Id of the HBS 1 04. These 
identifiers will be discussed in more detail below with <*5 
respect to roaming. Security related information is pref- 
erably also included in this message to enable the HB- 
SC 1 05 to authenticate the home base station HBS 1 04. 
The home base station 104 is a device that will be ac- 
quired by a subscriber and will possibly not be supplied so 
by the operator of the home base station controller 1 05. 
It is therefore important to verify that the home base sta- 
tion 104 is authorised to connect to the home base sta- 
tion controller 105 in the same way as a mobile terminal 
is conventionally authenticated before being allowed to ss 
connect to a public mobile communications network. 
The home base station controller HBSC 1 05 also has 
access to a database containing relevant Bluetooth de- 



vice address information for checking. On reception of. 
the ATTACHMENT.QUERY message, the HBSC 105 
stores the IP address of the HBS 1 04 and the Bluetooth 
device address, selects an Ethernet interface that 
should be used by the HBS 104 and two ports that the 
HBS 104 should use for static and dynamic TCP con- 
nections, respectively. The HBSC 105 then opens the 
assigned ADM and traffic ports for listening. Only the 
designated home base station HBS 1 04 will be author- 
ised to connect to these ports, based on its IP address. 
The assigned ports and other information including the 
IP address of the selected interface, the location area 
identifier LAI and a unique identifier HBS Id, is commu- 
nicated to the HBS in event 5 with an 
ATTACHMENT_RESPONSE message. On reception of 
this message, the HBS 104 stores the LAI and HBS Id 
in non-volatile memory, so that this information will be 
available after a reset. The TCP connection with the HB- 
SC 105 attach-query-port is then closed by the ex- 
change of messages in events 6 to 8. The home base 
station HBS 104 then has a limited time, for example 2 
minutes, in which to attempt a static TCP connection, 
otherwise the ports will be closed and allocated resourc- 
es in the HBSC, 105 released. This occurs in events 9 
to 11 with TCP synchronisation messages, followed in 
event 12 by a message from the HBSC 105 communi- 
cating system information relevant to the HBS 104. In 
order to test the static TCP connection, the HBS 104 
must send a message to the static port of the HBSC 1 05, 
as shown in event 1 3, in the form of a HBS_ ALIVE mes- 
sage, if this message is not received at predetermined 
intervals the HBSC will close the ports and release the 
allocated resources. The required time interval is pref- 
erably communicated to the home base station HBS 1 04 
by the home base station controller 105 with the 
ATTACHMENT_RESPONSE message in event 5. A dy- 
namic TCP connection is set up with the traffic port of 
the HBSC. 

[0022] The services provided to the subscriber are in- 
dependent of whether the mobile terminal MT 1 estab- 
lishes a link through fixed access network portion 10' or 
through a standard access network 10, such as repre- 
sented by a base station sub-system BSS 101 in a GSM 
network. This is achieved by using the same service en- 
vironment for all applications. This means, for example, 
that circuit-switched voice services are executed in the 
mobile services switching centre MSC 202. If WAP 
based services are supported these will be executed in 
WAP servers as in the conventional network. This also 
means that the user subscription is located in the home 
location register HLR 201 , even though the user has a 
subscription to a fixed access network portion 10' in the 
form of the home base station HBS 104. 
[0023] A simplified block diagram of the structure of 
the mobile terminal 1 is shown in Fig. 3. This mobile ter- 
minal 1 includes the standard upper layerfunctions 301 
required for any mobile operating in a GSM system. 
These specifically include the connection management 
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layer and mobility management layer. These layers 301 
handle the telephony and r if present, packet data trans- 
mission and wireless access protocol (WAP) functions. 
These upper layer functions 301 connect with the GSM 
radio function module 302 as in a conventional GSM s 
mobile terminal. The GSM radio module 302 may also 
support GPRS functions. In addition to this GSM radio 
module 302, the mobile terminal additionally includes a 
further radio module 303 for the unlicensed radio serv- 
ice. In the preferred embodiment, the radio service is 10 
Bluetooth. This Bluetooth radio function module com- 
municates directly with the upper layer functions 301. 
The upper layer functions 301 thus transmit the same 
messages to the mobile core network portion whether 
using the GSM radio function module 302 or the Blue- is 
tooth radio function module 303. This allows the sub- 
scriber to perceive no change in the service obtainable 
whether the mobile terminal is in the coverage area of 
a home base station (HBS) 104 or a base station sub- 
system 101. 20 
[0024] Fig.4showsablockrepresentationofthefunc- 
tional organisation of the mobile terminal 1 . In common 
with a conventional GSM terminal, the illustrated mobile 
terminal 1 includes a connection management Iayer310 
and a mobility management layer MM 320. In conven- 2s 
tional GSM terminals, the mobility management layer 
MM 320 uses the resources of the radio resource RR 
layer. In the mobile terminal according to the present in- 
vention, a radio resource sub-layer RR 340 dedicated 
to a GSM radio interface 350 is also included and will 30 
be used in the same way as the radio resource layer in 
a conventional GSM terminal. Incidentally, the GSM ra- 
dio interface 350 may also serves as a general packet 
radio interface GPRS. However, functional organisation 
of the mobile terminal 1 differs from conventional GSM 35 
terminals by the inclusion of an unlicensed radio inter- 
face, in the exemplary embodiment a Bluetooth radio 
interface 370 and a radio resource sub-layer 360 dedi- 
cated to this Bluetooth radio interface 370. A logical lay- 
er 380 for adaptation of the Bluetooth radio interface is 40 
provided between the Bluetooth radio interface and the 
Bluetooth radio resource sub-layer 360. The unlicensed 
radio interface 370 is run in parallel with the GSM radio 
interface 350. In order to co-ordinate the two radio re- 
source layers 340, 360, a sub-layer 330 is provided be- 45 
tween these and the mobility management MM layer 
320. This service co-ordination layer 330 effectively 
hides the existence of two separate radio resource RR 
sub-layers from the upper layers. The Bluetooth radio 
resource layer 360 signals to the service co-ordination so 
layer 330 when ft is entering or leaving the coverage of 
a home base station HBS area. This organisation 
means that the upper layers 320, 31 0 of the mobile ter- 
minal 1 operate as if only one radio interface is present 
This permits the subscriber to pass between links with ss 
a conventional base station sub-system 101 or a home 
base station 1 04 without noticing a difference in service. 
[0025] Fig. 5 shows the functional organisation of the 



fixed access network portion 1 0' that communicates with 
a mobile terminal MT 1 over an unlicensed radio link. 
The X-interface 11 shown in Fig. 4 departing from the 
Bluetooth radio module 370 connects the mobile termi- 
nal MT 1 of Fig. 4 with the a base station HBS 1 04 shown 
in Fig. 5. The home base station HBS 104 also has a 
Bluetooth radio module 401 that connects with a Blue- 
tooth radio resources sub-layer BT-RR 403 through a 
Bluetooth adaptation layer 402. The Bluetooth radio re- 
sources sub- layer 403 provides services to upper level 
layers 404, which are essentially so-called'layer 3' serv- 
ices, although the radio resource control protocol layers 
conventionally included in layer 3 in GSM systems are 
not part of these layer 3 services. As discussed later, 
the upper layers that are transported transparently, i.e. 
without interworking or mapping, through the fixed ac- 
cess network 10' include at least the mobility manage- 
ment protocol layer and above. These upper layer serv- 
ices are indicated in the figure by a double headed arrow 
404 between lower layers on the mobile terminal and 
home base station controllersides of the home base sta- 
tion The lowest layers at the interface between the home 
base station HBS 104 and the home base station con- 
troller HBSC 105 is adapted to run IP. A suitable inter- 
face is the 10 Base T or 1 00 Base T Ethernet interface. 
This is illustrated in Fig. 5 by a lower IP layer 406 on top 
of which either TCP or UDP 405 is run. It will be under- 
stood that SCTP may be used in place of TCP. Above 
this layer is provided a radio resource layer RR IP 407 
that is specif icaily adapted to the IP-based interface be- 
tween the home base station HBS 104 and the home 
base station controller HBSC 105. The physical inter- 
face between these elements is an IP based fixed net- 
work 106. At the home base station controller HBSC 

105, the tower layers 501 are again the modified IP 
adapted radio resource control layer RR IP503 over 
TCP (or SCTP) or UDP over IP. In Fig. 5 only a GSM 
home base station controller HBSC is shown. As tor the 
home base station H BS 1 04, the lower layers 501 of the 
home base station controller HBSC 105 provide servic- 
es to the upper layers 502, which again are represented 
as an arrow directed towards the core network portion 
side of the home base station controller 105. It is appar- 
ent from this organisation that the upper layers, in other 
words essentially the layer 3 services represented by 
the mobility management MM 320 and connection man- 
agement CM 310 layers in the mobile terminal MT 1 are 
relayed between the mobile terminal MT and the core 
network portion 20 without mapping or other interwork- 
ing functions. The transport of these layers is transpar- 
ent to the lower Bluetooth layers 360, 380, 370 and 401 , 
402, 403 of the X interface and to the TCP or UDP over 
IP layers of the Y interface through the fixed network 

106. The connection through the fixed network 106 is 
thus a tunnel. 

[0026] As mentioned above, the installation of the 
fixed access network portion 1 0', is simplified by obviat- 
ing the need for cell planning on the part of the network 
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operator. A consequence of this is that, uniike a base 
station controller BSC 102 in a GSM network, the fixed 
access network 10' will not know the location of a home 
base station HBS 104 relative to surrounding cells; and 
so cannot direct a mobile terminal MT 1 to listen out for 
signals from specific cells in anticipation of handover 
This is overcome in accordance with the invention by 
using a self-planning radio technology and allowing the 
mobile terminal MT 1 to pass information about neigh- 
bouring cells in the public mobile network to the home 
base station controller HBSC 105 unsolicited by the ac- 
cess network 10\ Preferably, the mobile terminal MT 1 
retains identification information of the last public mobile 
network cell in which it was located. This information is 
passed to the network in anticipation of a possible 
handover. The mobile terminal MT 1 may also monitor 
signal strengths of surrounding cells periodically and 
pass this information together with the cell identification 
to the network. Consequently, the knowledge about 
cells neighbouring to the coverage of a home base sta- 
tion HBS 104 is built up dynamically as this information 
is passed on by the mobile terminal MT 1 . The informa- 
tion is preferably passed from the mobile terminal MT 1 
to the network using a location update message, which 
is known from conventional public mobile network pro- 
cedures such as GSM. 

[0027] The organisation and mechanisms required for 
roaming and handover between the coverage area of 
home base stations HBS 1 04 and cells of a public mobile 
network defined by base transceiver stations 1 03 is de- 
scribed further below. 

Roaming 

[0028] In conventional public mobile systems, such as 
GSM, network coverage is divided Into multiple location 
areas LA, which may comprise one or several BTS ceils. 
Each location area is assigned a unique code called a 
location area identifier LAI. A similar system of areas, 
termed routing areas RA is proposed in the general 
packet radio service GPRS. The position of a mobile ter- 
minal MT 1 can be tracked using the system of location 
areas LA when no session is ongoing. Specifically, when 
a mobile terminal MT 1 enters a new LA it reports this 
to the network This information is used by the network 
when the mobile terminal MT 1 is paged. The network 
pages the whole location area LA and watts for the 
paged terminal to respond. 

[0029] In accordance with the present invention, all 
home base stations HBS 104 configured to connect to 
a single home base station controller HBSC 1 05 are as- 
signed to the same location area LA. This is illustrated 
in Fig. 6. Fig. 6 shows four cells 40 of a conventional 
GSM mobile network each represented as a hexagon. 
Each cell 40 is defined by, and surrounds, a base trans- 
ceiver station BTS 103. In the illustrated example, two 
cells are grouped into a single location area 41 . This is 
shown as a continuous line around the two cells 40. 



Within this location area 41 is a second, Bluetooth loca- 
tion area 42 containing a home base station HBS 104. 
A further home base station HBS 104 and its surround- 
ing coverage area that is also designated the location 
s area 42 is located partly in this location area 41 and part- 
ly in a neighbouring cell 40. 

[0030] When a mobile terminal MT 1 moves into the 
location area 42 of the home base station HBS 104, the 
Bluetooth module 303 in the mobile terminal MT 1 and 

10 a Bluetooth module in the home base station establish 
a Bluetooth communication link. On a functional level, 
the Bluetooth radio resource sub-layer306 in the mobile 
terminal 1 determines whether the signal strength is 
good enough to establish a reliable connection. The 

'5 Bluetooth radio resource su b-layer 360 then informs the 
mobility management MM functional plane 320 via the 
service co-ordination sub-layer 330 about the new loca- 
tion area 42, which triggers the mobility management 
layer 320 to perform a location update procedure direct- 

20 ed towards the home base station HBS 104 in the loca- 
tion area 42. The Bluetooth radio resource sub-layer 
360 periodically reads the signal strength and informs 
the service co-ordination sub-layer 330 about the cur- 
rent level. 

25 [0031] When the mobile terminal MT 1 moves out of 
the home base station 1 04 coverage area 42 such that 
the signal level drops to a critical level, the service co- 
ordination sub-layer 330 activates the GSM radio inter- 
face 350 through the radio resource sub-layer 340. 

^o When the mobility management MM layer 320 is in- 
. formed about the new location area 41, which is as- 
signed to the public mobile network, a location update 
procedure will be performed using normal GSM proce- 
dures. 

35 [0032] As mentioned above, In conventional public 
mobile telecommunication networks location areas LA 
normally cover a number of cells. In the fixed access 
network portion 10' of the invention, a single home base 
station controller HBSC 105 will handle one location ar- 

40 ea. In other words all home base stations HBS 1 04 con- 
nected to a home base station controller HBSC 1 05 will 
be assigned to a single location area. Since the network 
operator has no influence over the true location of a 
home base station HBS 104 as this may be installed at 

45 any suitable location by a subscriber conventional cell 
planning and organising of home base stations into lo- 
cation areas is not practical. 

[0033] A consequence of providing only a single loca- 
tion area LA for all mobile terminals is that a paging mes- 
sage transmitted by the core network 20 will naturally 
be addressed to all mobile terminals. Allowing all termi- 
nals to be paged in this way is naturally a waste of net- 
work resources. To prevent this, the home base station 
controller HBSC 1 05 is provided with a register or data- 
55 base 1051 for storing the location of mobile terminals 
that have been connected to home base stations 104. 
This is illustrated schematically in Fig. 7. This register 
1051 is similar in structure to a visitor location register 
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VLR. It may be constructed as part of the home base 
station controller structure, or be a separate entity that 
can be accessed and consulted by the home base sta- 
tion controller as necessary. The register 1051 is con- 
structed as information is received about the location of 
a mobile terminal. The coverage of a single home base 
station HBS 1 04 will define a cell and each home base 
station HBS will have a unique cell identity. As mobile 
terminals 1 roam into a cell of a home base station and 
performs a location update, the home base station con- 
troller HBSC maps the international mobile subscriber 
identity IMS! of the mobile terminal to a home base sta- 
tion cell identity HBSJd. This register will thus be mod- 
ified as a new mobile terminal roams into a new home 
base station HBS ceil. 

[0034] When a mobile is paged, the home base sta- 
tion controller HBSC 1 05 looks into the paging message 
to determine which mobile terminal is paged by identi- 
fying the IMSI. Using the mapping in the register 1051, 
the home base station controller determines to which 
home base station 104 the paging message should be 
sent and can thus confine the paging message to this 
home base station 104 only. The cell identification as- 
sociated with each home base station HBS ensures that 
this is transparent for existing charging and statistical 
.functions in mobile services switching centres MSG 202 
and serving GPRS support nodes SGSN 203. 
|0035] Preferably it is possible to limit access to the 
core network 20 through the fixed access network por- 
tion 10\ so that a subscriber can specify which mobile 
terminals will be able to recognise a Bluetooth radio con- 
nection with a particular home base station HBS. This 
can be achieved with Bluetooth radio by using the fea- 
ture within Bluetooth to pair entities. For a home base 
station HBS 104 required to provide access to multiple 
mobile terminals 1 , such as in a corporate environment, 
user selection is preferably performed on a network lev- 
el. 

Handover 

[0036] Since home base stations and their associated 
ceils will generally be located in the coverage area of 
base transceiver stations BTS 103 of a public mobile 
network, handover of an established call from a base 
transceiver station BTS 103 to a home base station will 
not be necessary. Thus all calls established via GSM or 
other public mobile network radio will be concluded on 
public mobile network radio. If the mobile terminal has 
roamed into a home base station cell during this session 
and remains in this cell, subsequent calls will be per- 
formed using the Bluetooth radio or other unlicensed ra- 
dio interface. 

[0037] Handover is thus necessary only when a call 
established through a home base station HBS 1 04 using 
Bluetooth radio must be passed over to a base station 
transceiver BTS 103 using public mobile network radio 
when the mobile terminal moves out of the coverage ar- 



ea of the home base station HBS 104. This procedure 
is illustrated in Fig. 8. 

[0038] Fig. 8 shows the sequence of signalling be- 
tween the mobile terminal MT 1 , the home base station 
5 HBS 104, the home base station controller HBSC 105, 
the mobile services switching centre MSC 202 and a 
base tranceiver station BTS 103 and base station con- 
troller of a base station sub-system BSS 101 . 
[0039] Before handover is performed it is assumed 

10 that the mobile terminal MT 1 has previously identified 
the strongest public mobile radio signal from a neigh- 
bouring ceil 40, or alternatively retains the cell id of the 
last public mobile radio ceil used, and subsequently 
passed the cell identity to the home base station con- 
's trailer HBSC 1 05 via the home base station HBS 1 04 as 
part of the location update procedure. 
[0040] As already described in relation to roaming, the 
Bluetooth radio resource sub-layer 360 periodically 
monitors the Bluetooth signal strength and reports this 

20 to the service co-ordination sub-layer 330. When a call 
is active, the Bluetooth radio resource sub-layer 360 al- 
so sends a message for delivery to the home base sta- 
tion HBS 1 04, which is conveyed to the home base sta- 
tion controller HBSC 105. This is illustrated at events 1 

25 and 2 in Fig. 8. The home base station controller HBSC 
1 05 evaluates the reported measurements to determine 
whether handover Is required. If handover is required, 
a HANDOVER REQUIRED message is generated with 
the cell identity of the GSM cell previously delivered writ- 

'so ten into this message. This message is sent to the mo- 
bile services switching centre MSC 202 as shown at 
event 3. The MSC 202 then sends a HANDOVER re- 
quest to a base station controller BSC 102 of the iden- 
tified base transceiver station 1 03 in event 4. The base 

33 station controller takes care of allocating a traffic chan- 
nel in accordance with conventional GSM procedures 
and receives an acknowledgement of the activation of 
this channel from the base transceiver station in events 
5 and 6. In event 7 the base station controller BSC 1 02 

to sends an acknowledgement of the HANDOVER request 
to the MSC 202, which in turn sends a HANDOVER 
command to the home base station controller HBSC 1 05 
in event 8 for transmission to the home base station HBS 
1 04 in event 9. The home base station HBS 104 sends 

45 a HANDOVER command to the mobile terminal MT 1 in 
event 10. This is received by the Bluetooth radio re- 
source sub-layer 360 and passed via the service co-or- 
dination sub-layer 330 to the radio resource sub-layer 
340 above the GSM radio module 350, which then starts 

so to send handover access bursts over the Urn interface 
to the base transceiver station BTS 103 in event 11. 
These are detected in the normal way by the base trans- 
ceiver station BTS 103, which reports detection to the 
MSC 202 via the base station controller BSC 102 in 

55 events 1 2 and 1 3. The link is then established between 
the base station transceiver BTS 1 03 and the mobile ter- 
minal MT 1 and after the base station transceiver BTS 
103 has sent an establish indication message to the 
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base station controller BSC 202, the handover is com- 
pleted and an acknowledgement sent by the base trans- 
ceiver station BTS 103 to the base station controller 
BSC 202 and by the base station controller BSC to the 
MSC 202 in events 15 and 16. The MSC 202 then 
switches to the new path. 

[0041] Before handover takes place, the subscriber is 
preferably alerted that the mobile terminal is moving out 
of range of the home base station HBS 1 04, i.e. that the 
Bluetooth radio signal is reaching a critically low level. 
This may be done by the service co-ordination sub-layer 
330 ordering an audio or other alarm notification while 
a signal level is at a critical level and terminating this 
notification when the signal level rises. 
[0042] Figs. 9 and 1 0 show protocol architectures for 
the various elements in the fixed access network portion 
10' of a second generation GSM access network ac- 
cording to the invention. 

[0043] Fig. 9 illustrates the protocol layers for trans- 
port of third generation protocol specified in the 3GPP 
Technical Specification 24.008 between a mobile termi- 
nal MT 1 and a mobile services switching centre MSC 
202. In the control plane, the peer higher level layers of 
the mobile terminal MT 1 and the mobile services 
switching centre MSC 202 communicate directly with 
one another. In other words these layers are relayed 
through lower layers by both the home base station HBS 
1 04 and the home base station controller HBSC 1 05 in 
a transparent manner. These levels are the mobility 
management MM layer and the CC, GMM, SM and short 
message service layers. The lower layers of the mobile 
terminal MT 1 communicate directly with peer layers in 
the home base station HBS 104. These include the 
Bluetooth radio resource control protocol layer RR BT, 
which among other tasks deals with the allocation of 
synchronous Bluetooth channels. Below the Bluetooth 
radio resource control protocol is the layer 2 competitive 
access provider L2CAP and the Bluetooth baseband 
layer. At the Y interface between the home base station 
HBS 104 and home base station controller HBSC 105 
is provided a further radio resource control protocol 
adapted to IP layer RR IP. Below this radio resource lay- 
er is include an IETF synchronous control transport pro- 
tocol SCTP, which with communicates with a peer SCTP 
layer in the HBSC 1 05. It will be apparent that this SCTP 
layer could be replaced by a TCP protocol layer. This is 
carried on an IP layer, which likewise communicates 
with an IP layer in the HBSC 105. Finally lower layer 
tunnels through the fixed network 106 establish direct 
links with corresponding layers in the HBSC 105. The 
upper layer protocol messages are carried through the 
home base station HBS 1 04, the home base station con- 
troller HBSC 105 and across the Y interface over the 
respective radio resource control protocol layers. Turn- 
ing now to the A-interface between the HBSC 105 and 
MSC 202, the upper layer messages are carried over a 
base station service access point layer BSSAP. This sits 
above a signalling connection control part layer SCCP, 



a message transfer part layer MTP and a layer 1 level, 
in that order. Each of these layers communicate with 
peer layers in the MSC 202. 

[0044] The provision of a radio resource layer BT-RR 
5 /RR IP in the mobile terminal 1 , home base station and 
home base station controller that is suitably adapted to 
carry upper layer messages over Bluetooth and IP 
based links, respectively. enables 24.008 messages to 
be carried from the mobile terminal th rough to the mobile 
10 services switching centre MSC 202, and therefore over 
both an unlicensed radio interface and an IP-based fixed 
network In a transparent manner. Thus all services in 
24.008 can be supported for a mobile terminal MT that 
accesses the mobile core network portion via an unii- 
™ censed radio link, such as Bluetooth, in a forward com- 
patible manner. 

[0045] The modified Bluetooth and Internet Protocol 
radio resource control protocols RR BT and RR IP differ 
from the GSM standard protocol. Specifically, these new 

20 protocols are dependent on, and adapted to, the unli- 
censed radio technology used and transport over IP, re- 
spectively. They provide a transparent transport mech- 
anism for upper layer information that is of the mobility 
management layer and above. They also support the 

25 existing service access points (SAP) to the mobility 
management layer. In addition to these new radio re- 
source protocols a modified mobility management pro- 
tocol is used for 24.008 transport. Specifically, the mo- 
bility management layer enables celt planning, i.e. ena- 

30 bling the network entity that controls a number of cells 
to obtain the identity and other data of neighbouring cells 
that it does not control. The layer 2 protocol in the mobile 
terminal MT must also support the interaction between 
the radio resource layer for GSM radio and the radio re- 
ds source layer for Bluetooth radio. 

[0046] Fig. 1 0 depicts the user control plane for voice 
transport between a mobile terminal MT 1 and a mobile 
services switching centre MSC 202. At the top of the 
layers in the mobile terminal MT 1 G.71 1 voice protocol 

40 communicates directly with a peer layer at a called or 
calling subscriber. These protocol messages are re- 
layed through the home base station HBS 104, home 
base station controller HBSC 1 05 and the mobile serv- 
ices switching centre MSC 202. The next layer down in 

45 the mobile terminal MT 1 defines the modulation 
scheme, which is continuously variable slope delta mod- 
ulation CVSD. This layer sits above a Bluetooth base- 
band layer, which is the lowest layer in the MT. This low- 
est layer communicates with a peer layer in the HBS, 

50 which likewise lies below a modulation layer CVSD. On 
the Y-interface between the HBS 104 and HBSC 1 05 an 
RTP layer sits at the top of the stack above a UDP over 
IP layer, which communicates directly with a peer layer 
In the HBSC 105. Below the UDP over IP layer are tun- 

55 nelling layers for establishing direct tunnelling links 
across the fixed network 1 06 as in the control plane de- 
scribed with reference to Fig. 9. The A interface between 
the HBSC 1 05 and MSC 202 uses the standard E1 pro- 
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tocoi. 

[0047] While the present invention has been dis- 
cussed with reference to a GSM network, it will be un- 
derstood that rt may be applied to other mobile networks, 
specifically the third generation mobile network UMTS 5 
both with or without GPRS. The invention as described 
above may be used in any mobile network that allows 
the separation of an access network portion from a serv- 
ice network portion. 

[0048] Moreover, those skilled in the art will recognise 10 
that while a mobile terminal capable of supporting both 
public mobile network radio communication, such as 
GSM, and unlicensed radio communication, Is conven- 
ient for the subscriber, this is not necessary. The sub- 
scriber may instead use a separate unlicensed radio ' is 
handset for accessing the public mobile network via the 
fixed access network portion 10' provided by a home 
base station and home base station controller. Such a 
-handset would include all the layer functions in the de- 
scribed combination mobile terminal 1, but exclude 20 
those layers relating specifically to the licensed radio. A 
conventional mobile terminal for use in the public mobile 
network would then have to be used outside of the cov- 
erage of a home base station and handover between 
the two access networks would not be supported as de- 25 
scribed above. 

Claims 

30 

-1 . In an access network arranged to communicate with 
a core network portion of a public mobile telecom- 
munications network, said access network includ- 
ing a base station adapted to communicate over an 
unlicensed radio interface with at least one mobile 35 
terminal (1) and to communicate through a fixed 
broadband network (106) with an access control 
part (105) of said access network (10') connected 
to said core network (20), a method of connecting 
said base station with said access control part over *o 
said fixed broadband network, characterised by 
establishing a connection with a first port of the ac- 
cess control part on said fixed network, 
sending an attachment request to said first port in- 
cluding a first predetermined device identifier, 45 
receiving a request acknowledgement including a 
connection interface address on said fixed network 
and a base station identifier, 
releasing said connection with said first port, 
establishing a connection at said fixed network in- so 
terface address using said base station identifier. 

2. A method as claimed in claim 1 , further character- 
ised by the step of: 

55 

sending a connection maintenance message to 
said received interface address within a prede- 
termined time interval to maintain said connec- 



tion established. 

3. A method as claimed in claim 2, further character- 
ised by the step of: 

receiving data representing said time interval 

from said access control part 

with said request acknowledgement. 

4. A method of registering a base station that is adapt- 
ed to communicate with mobile terminals through 
an unlicensed radio link with an access network 
controller that provides access to a core network of 
a public mobile telecommunications network 
through a fixed network interposed between said 
base station and said access network controller, 
said method including the steps of: 

receiving a connection request including an un- 
licensed radio device identifier from said base 
station through said fixed network, 
authenticating said unlicensed radio device 
identifier, 

selecting a base station identifier and reserving 
at least one communication port on said fixed 
network for communication with said base sta- 
tion, 

transmitting a response to said connection re- 
quest including an interface address for said re- 
served port and said base station identifier, 
checking for said base station identifier in com- 
munication requests through said interface ad- 
dress and reserved port priorto permitting com- 
munication. 

5. A method as claimed in claim 4, further character- 
ised by: 

communicating a connection maintenance time 
interval to said base station, and releasing said 
reserved port if a connection is not established 
within said time interval. 
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